Seminaire Poincare 2 (2005) 1 - 29 | Seminaire Poincare 



Approaches to Quantum Error Correction 

Julia Kempe 
CNRS & LRI 

Laboratoire de Recherche Informatique 
Bat. 490, Universite de Paris-Sud 
91405 Orsay Cedex 
Prance 

O 

Q 



(N 



We have persuasive evidence that a quantum computer would have extraordinary power. But 
will we ever be able to build and operate them? A quantum computer will inevitably interact with 
its environment, resulting in decoherence and the decay of the quantum information stored in the 
device. It is the great technological (and theoretical) challenge to combat decoherence. And even if 
' we can suitably isolate our quantum computer from its surroundings, errors in the quantum gates 

, themselves will pose grave difficulties. Quantum gates (as opposed to classical gates) are unitary 

transformations chosen from a continuous set; they cannot be implemented with perfect accuracy 
and the effects of small imperfections in the gates will accumulate, leading to an eventual failure of 
the computation. Any reasonable correction-scheme must thus protect against small unitary errors 
in the quantum gates as well as against decoherence. Furthermore we must not ignore that the 
correction and recovery procedure itself can introduce new errors; successful fault-tolerant quantum 
computation must also deal with this issue. 

The purpose of this account is to give an overview of the main approaches to quantum error 
correction. There exist several excellent reviews of the subject, which the interested reader may 
consult (see |Pre98b] . |Pre55] . |JNC00j . |KSV02j . [SteMl IStetJT] and more recently [Got05] h 

a ' 

1 Introduction 



"We have learned that it is possible to fight entanglement with entanglement. " 

John Preskill, 1996 

In a ground breaking discovery in 1994, Shor [Sho94] has shown that quantum computers, 
if built, can factor numbers efficiently. Since then quantum computing has become a burgeoning 
held of research, attracting theoreticians and experimentalists alike, and regrouping researchers 
from fields like computer science, physics, mathematics and engineering. One more reason for the 
enormous impetus of this field is the fact that by the middle of 1996 it has been shown how to 
realize fault-tolerant quantum computation. This was not at all obvious; in fact it was not even 
clear how any form of quantum error-correction could work. Since then many new results about 
the power of quantum computing have been found, and the theory of quantum fault-tolerance has 
been developed and is still developing now. 

In what follows we will give a simple description of the elements of quantum error-correction 
and quantum fault-tolerance. Our goal is to convey the necessary intuitions both for the problems 
and their solutions. In no way will we attempt to give the full and formal picture. This account is 
necessarily restricted with subjectively chosen examples and approaches and does not attempt to 
describe the whole field of quantum fault-tolerance, which has become a large subfield of quantum 
information theory of its own. 

The structure of this account is the following. First we will describe why quantum error 
correction is a non-trivial achievement, given the nature of quantum information and quantum 
errors. Then we will briefly review the main features of a quantum computer, since, after all, this is 
the object we want to protect from errors, and it is also the object which will allow us to implement 
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error-correction. Then we will give the first example of a quantum error-correcting code (the Shor- 
code), followed by other error correction mechanisms. We proceed to outline the elements of a 
full fledged fault-tolerant computation, which works error-free even though all of its components 
can be faulty. We mention alternative approaches to error-correction, so called error-avoiding or 
decoherence-free schemes. We finish with an outlook on the future. We will try to keep technical 
details and generalizations to a minimum; the interested reader will find more details, as well as 
suggestions for further reading, in the appendix. 

2 The subtleties of quantum errors 

"Small errors will accumulate and cause the computation to go off track. " 
Rolf Landauer, 1995, in "Is quantum mechanics useful?" 

A quantum machine is far more susceptible to making errors then classical digital machines. 

Not only is a quantum system more prone to decoherence resulting from unwanted interaction 
between the quantum system and its environment, but also, when manipulating quantum infor- 
mation we can only implement the desired transformation up to a certain precision. Until 1995 it 
was not clear at all if and how quantum error correction could work. 

The second big breakthrough towards quantum computing (after Shor's algorithm) was the 
insight that quantum noise can be combatted or that quantum error protection and correction 
is possible. The first big step in this direction was again made by Peter Shor in his "Scheme for 
reducing decoherence in a quantum memory" in 1995 |Sho95j . 

This was indeed an amazing piece of work: the difficulties facing the introduction of classical 
error-correction ideas into the quantum realm seemed formidable. In fact there was a large number 
of reasons for pessimism. Let us cite but a few of the apparent obstacles: 

(1) There is a hugely successful theory of classical error correction which allows to protect 
against classical errors. However, classical errors are discrete by their nature. In the most common 
case where the information is encoded into a string of bits, the possible errors are bit-flips or 
erasures. A quantum state is a priori continuous, and hence also the error is continuous. Similarly, 
quantum operations are continuous by their nature, and will necessarily only be implemented with 
a certain precision, but never exactly. As noted by Landauer [Lan95j , small errors can accumulate 
over time and add up to large, uncorrectable errors. Moreover it is not clear how to adapt the 
discrete theory of error correcting codes to the quantum case. 

(2) A second objection is that to protect against errors, the information must be encoded in 
a redundant way. However, the quantum no-cloning theorem [Die82[|WZ82j , which follows directly 
from the linearity of quantum mechanics, shows that it is impossible to copy an unknown quantum 
state. How then can the information be stored in a redundant way? 

(3) Another point is the following: in order to correct an error, we need to first acquire some 
information about the nature and type of error. In other words we need to observe the quantum 
system, to perform a measurement. But any measurement collapses the quantum system and 
might destroy the information we have encoded in the quantum state. How then shall we extract 
information about the error without destroying the precious quantum superposition that contains 
the information? 

Many researchers in the field were pessimistic about the prospects of error-correction and 
Shor's result came as a great surprise to many. All the initial objections let us appreciate the 
elegance of the solution even more. But before giving the key ingredients, we need to briefly review 
the object we want to protect from errors, the actual quantum machine. 

3 What is a quantum computer? 

"The more success the quantum theory has, the sillier it looks. " 
Albert Einstein, 1912 

There are nearly as many proposals for the hardware of a quantum computer today, as there 
are experimental quantum physicists. The ultimate shape and function of a quantum computer will 
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depend on the physical system used, be it optical lattices, large molecules, crystals or silicon based 
architectures. Nonetheless, each of these implementations have some key elements in common, 
since they all implement the quantum computing model. 

What are the key ingredients of a quantum computer? A quantum computer is a machine that 
processes basic computational units, so called gwbits, quantum two-level systems. (Although there 
might be quantum machines which process higher-dimensional quantum systems, we will restrict 
ourselves for simplicity to the case of two-level systems.) Qubits are two-dimensional quantum 
states spanned by two basis-states, which we conventionally call |0) and |1), alluding to the classical 
bits of a standard computer. Hence the general state of a qubit is 

|V)=ot|0)+/3|l) |a| 2 + |/3| 2 = l, 

where a and are complex numbers. In each implementation of a quantum computer these basis 
states |0) and |1) need to be identified; they usually correspond to two chosen states of a larger 
system. For any quantum computation, fresh qubits have to be supplied in a known state, which 
is usually taken to be the |0) state. 

A quantum computer implements a unitary transformation on the space of several qubits, 
as consistent with the laws of quantum mechanics. However, in the context of computation, each 
unitary is decomposed into elementary gates, where each gate acts on a small number of qubits 
only. These elementary gates constitute a universal gate set, which allows to implement any unitary 
operation on the set of qubits. There are several universal gate sets, but we will mention only two, 
which are relevant for what follows. The first such set is continuous, and consists of all one-qubit 
unitaries, together with the controlled NOT or CNOT. The action of the CNOT on the basis states 
|00),|01),|10),|11) is as follows 

\ 


i ■ 

1 o) 

In quantum circuit design it is often depicted as in Fig. [1] 

control • 



target 




Fi gure 1: The top qubit is the control qubit. If it is in the state |0), then the target qubit stays unchanged, if it is 
in the state |1), the target qubit is flipped from |0) to |1) and vice versa. 

It is possible to implement any unitary operation by a sequence of CNOT and single qubit 
unitary operations on the qubits. 

The second set of universal gates is discrete. It contains the gates H, tt/8, Z and CNOT. The 
first three gates are single qubit gates. H is called the Hadamard transform, 7r/8 is a phase gate 
and Z is known to physicists as one of the Pauli matrices crJ3- On the basis |0), |1), they act as 

All experimental proposals, in one way or another, demonstrate the ability to induce the transfor- 
mations corresponding to this (or some other universal) gate set. Note that it is absolutely crucial 
to implement the two-qubit gate CNOT (or some other suitable two-qubit gate), as single qubit 
operations alone are clearly not universal. 



CNOT = 
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1 Note that the Z gate is not necessary for universality, as it can be generated from the other gates in the set. 
However, it is often included for convenience, as it becomes necessary in many fault-tolerant gate sets. 
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This gate set is discrete, it contains only four gates. However, this comes at a price. It is 
not in general possible to implement any unitary transformation with a sequence drawn from this 
gate set. But it is possible to approximate any unitary to arbitrary accuracy using gates from this 
set. (Here accuracy is measured as the spectral norm of the difference between the desired unitary 
matrix and the actually implemented unitary matrix.) This is good enough for our purposes. 

The last ingredient of a quantum computer is the read-out, or measurement. At the end of 
the day, when we want to extract the result of the quantum computation, we need to observe the 
quantum system, to gain information about the result. 

In general one assumes that each qubit (or the qubit carrying the result of the computation) 
is measured in some basis. The classical result represents the outcome of the computation. 

Schematically, then, a quantum computer looks like in Fig. [2] 
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Figure 2: A quantum computer, schematically. Fresh qubits, initialized in the state |0), are supplied as the input to 
the unitary transform U . U is composed of elementary gates affecting at most 2 qubits. At the end of the computation 
the qubits are measured. 



4 What is a quantum error? 

"Had I known that we were not going to get rid of this damned quantum jumping, I never would 

have involved myself in this business!" 
Erwin Schrddinger 

Quantum computers are notoriously susceptible to quantum errors, and this is certainly the 
reason we did not yet succeed in building a scalable model. The problem is that our quantum system 
is inevitably in contact with a larger system, its environment. Even if we make heroic efforts to 
isolate a quantum system from its environment, we still have to manipulate the information inside 
it in order to compute, which again will introduce errors. Where it not for the development of 
methods of quantum error correction, the prospects for quantum computing technology would not 
be bright. In order to describe quantum error correction we need to get a clear picture of what the 
noise processes affecting our machine are. 

But how do we describe a quantum error? 

Let us study the example of a single qubit. This qubit might undergo some random unitary 
transformation, or it might decohere by becoming entangled with the environment. In general it 
will undergo some unitary transformation in the combined system of qubit and environment. Let us 
call \E) the state of the environment before the interaction with the qubit. Then the most general 
unitary transformation on system and environment can be described as 

U: |0> <8> ]JS?> ^\0)®\E OQ ) + \1)®\E 01 ) 
|1) ® \E) — > |0) ® |.Eio) + |1> ® \E n ). 

Here \Eij) represent not necessarily orthogonal or normalized states of the environment, with the 
only constraint that the total evolution be unitary. The unitary U entangles our qubit with the 
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environment. Potentially, this entanglement will lead to decoherence of the information stored in 
the qubit. 

Suppose now the qubit is in the state a|0) + /3|ljE Now if the qubit is afflicted by an error, 
it evolves as 

(a|0) + fll)) ® \E) — > a (|0) <8> \E Q0 ) + |1) <g \Eoi)) + /?(|0) <8> |£ 10 ) + |1) <8> |^n)) 

= (o|0) + 011)) <g> - (|#oo) + l^n)) identity 

+ (a\0) -/3|1))® i (|^oo> - |#n)) phase flip 

+ (a|l) + /?|0)) ® i (|Soi) + |Bio)) Wt/Kp 

+ (o|l> - y9j0» ® | (|J%i> - |JSao» hithphase flip. (1) 

Intuitively, we may interpret this expansion by saying that one of four things happens to the qubit: 
nothing, a bit flip, a phase flip or a combination of bit flip and phase flip. This will be made more 
precise in the next section, where we see that quantum error correction will include a measurement 
of the error, collapsing the state into one of the four possibilities above. This way, even though the 
quantum error is continuous, it will become discrete in the process of quantum error correction. 
We will denote the four errors acting on a qubit as 



identity phase flip bit flip bit & phase flip 

These four matrices form the so called Pauli group. Another way of saying the above is to realise 
that these four errors span the space of unitary matrices on one qubit, i.e. any matrix can be 
expressed as a linear combination of these four matrices (with complex coefficients). If we trace 
out the environment (average over its degrees of freedom, see App. IB.2|) . the resulting operator 
can be expanded in terms of the Pauli group, we can attach a probability to each Pauli group 
element. Often the analysis of fault-tolerant architectures is simplified by assuming that the error 
is a random non- identity Pauli matrix with equal probability e/3, where e is the error rate. 

We now make a crucial assumption: that the error processes affecting different qubits are 
independent from each other. A quantum error correcting code, then, will be such that it can protect 
against these four possible errors. Once the error has become discrete it is much more obvious how 
to apply and extend classical error correction codes, which are able to protect information against 
a bit flip. 

We have so far only analyzed errors due to decoherence, but have neglected errors due to 
imperfections in the gates, in the measurement process and in preparation of the initial states. 
All these operations can be faulty. A natural assumption is again that these imperfections are 
independent of each other. In a similar fashion as before we can discretize the errors in a quantum 
gate. We can model a faulty gate by assuming that is is a perfect gate, followed by an error. For 
a one-qubit gate this error is the same as given in Eq. ([!}. For a two-qubit gate we assume that 
both qubits undergo possibly correlated decoherence. Similar reasoning as in Eq. fTJ) shows, that 
in that case the error is a linear combination of 16 possible errors, resulting from all combinations 
of the errors in Eq. on both qubits. Again, often the additional assumption is made that all 15 
non-identity errors appear with equal probability £2/15, where £2 is the two-qubit gate error rate. 
In a similar fashion we will deal with measurement and state preparation errors. 

Note that our analysis of the error is somewhat simplified. Several tools have been developed 
to study quantum decoherence and quantum noise. Some of these formalisms are described in more 
detail in App. [Bj As already mentioned, in order to give methods for quantum error correction, 



2 Of course our qubit could be part of a larger quantum state of several qubits. It might be entangled with other 
qubits which are unaffected by errors. So the coefficients a and /3 need not be numbers, they can be states that are 
orthogonal to both |0) and |1). 
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some assumptions about the nature of the noise have to be made. In one of the common models 
of noise in a quantum register it is assumed that each qubit interacts independently with the 
environment in a Markovian fashion^; the resulting errors are single qubit errors affecting each 
qubit independently at random. More details on models of quantum noise are given in App. [C] 

5 The first error correction mechanisms 

"Correct a flip and phase - that will suffice. 

If in our code another error's bred, 
We simply measure it, then God plays dice, 
Collapsing it to X or Y or Zed. " 
Daniel Gottesman, in "Error Correction Sonnet" 

We have seen how entanglement with the environment can cause errors that result in a 
complete loss of the quantum information. However, entanglement will also allow us to protect the 
information in a non-local way. If we distribute the information over several qubits in a way that 
it cannot be accessed by measuring just a few of the qubits, then by the same token it cannot be 
damaged if the environment interacts with just a few of the qubits. 

A marvellous machinery has been developed in the classical world to protect classical infor- 
mation, the theory of error correcting codes. The simplest possible such code is the repetition code: 
each bit is replaced by three of its copies: 

C: — >000 1 — an. 

This code clearly protects against one bit flip error. If a bit is flipped, we can still decode the 
information by majority voting. Only if two bit flips happen we will be unable to correctly decode 
the information. But if we assume that the probability of a bit flip is e and independent on each bit, 
then the probability that we cannot correct a bit flip is 3e 2 (l — e) + e 3 (there are three possible ways 
to have two bit flips and one way to have three bit flips). If we would not encode the information 
at all the error probability is e, so as long as e < 1/2 we gain by encoding. 

But how can we extend this idea to the quantum setting? There is no way to copy quantum 
information. There are not only bit flip, but also phase flip errors (and combinations of both). And 
moreover a measurement for majority vote will cause disturbance. 

Shor was the first to overcome all these obstacles lSho95l . He gave the most straightforward 
quantum generalization of the repetition code. Suppose we want to just deal with bit flip errors. 
We encode a single qubit with the repetition code on the basis states, i.e. 

|0} — > |000) |1) — > |111), 

such that 

a\0)+(3\l) — ►a|OOO)+0|lll). (3) 
This encoding can be realized with the circuit in Fig. [3l 

|0) (+) 1 q|000) 

|o> 

Figure 3: The CNOTs flip the target qubit if the first qubit is in the state Note that the transformation does 
not copy the state of the first qubit to the other two qubits, but rather implements the transformation of Eq. i3t . 

Now suppose a bit flip happens, say on the first qubit. The state becomes a|100) + /3|011). 
If we measured the qubits in the computational basis, we would obtain one of the states 1 100) 




3 This means that the environment maintains no memory of the errors, which are thus uncorrelated in time and 
qubit location. 



Vol. 2, 2005 Approaches to Quantum Error Correction 



7 



or |011), but we would destroy the quantum superposition. But what if instead we measured the 
parity of all pairs of qubits, without acquiring any additional information? For instance we can 
measure the parity of the first two qubits with the circuit in Fig. [4] 

code 
qubits 

ancilla H 




Figure 4: Circuit to measure the parity of the first two qubits of the quantum code word. Each CNOT flips the 
ancilla qubit if the source qubit is in the state If the first two qubits are in the state |00), the ancilla is left in 
the state |0). If these qubits are in the state |11) the ancilla is flipped twice and its state is also |0). Otherwise it is 
flipped once by one of the CNOTs. 



In our example, a parity measurement does not destroy the superposition. If the first qubit 
is flipped, then both 1 100) and 1 1 1} have the same parity 1 on the first two qubits. If no qubit 
is flipped and the code word is still in the state of Eq. this parity will be for both |000) 
and | 111) - If the error is a linear combination of identity and bit flip, similar to Eq. (TTJ), then the 
measurement will collapse the state into one of the two cases. Let us adapt Eq. (fT]) to the case of 
only a bit flip error on one qubit (\E 00 ) — \En), \Eqi) = \E W ) and l-Eoi) and \E o) are orthogonal) 
and write 

(a\0)+P\l))®\E) — ► vT^7 (a|0) + gjl)) ®\E 00 ) + y/i (a\l) + g|0)) ®\Eqi), (4) 

identity bit flip 

where we have normalized the state of the environment (\Eqq) and \Eqi) have norm 10. The 
probability that the parity measurement collapses to the bit flip case is s, the probability to project 
onto a state where no error has happened is 1 — e. Imagine now that each of the three qubits of 
the code undergoes the same error process of Eq. ([4]). This gives a threefold tensor product of 
Eq. ([J]) (each qubit has its own environment state) , which shows that the probability of no error 
becomes (1 — e) 3 > 1 — 3e, and the probability of each of the single qubit errors is e(l — e) < e. 
Of course there is now a nonzero probability that the state will be collapsed to a state where two 
or even three single qubit errors occured; however, the total probability of this happening is given 
by 3e 2 (l - e) + e 3 < 3e 2 . 

This mechanism illustrates how a measurement that detects the error, also discretizes it. The 
parity measurement disentangles the code qubits from the environment and acquires information 
about the error. The three parities (for each qubit pair of the code word) give complete informa- 
tion about the location of the bit flip error. They constitute what is called the error syndrome 
measurement. The syndrome measurement does not acquire any information about the encoded 
superposition, and hence it does not destroy it. Depending on the outcome of the syndrome mea- 
surement, we can correct the error by applying a bit flip to the appropriate qubit. 

We have successfully resolved the introduction of redundancy, the discretization of errors 
and a way to measure the syndrome without destroying the information. We still need to take 
care of phase flip errors. We have been able to protect against bit flip errors by encoding the bits 
redundantly. The idea is to also encode the phase of the state in a redundant fashion. Shor's idea 
was to encode a qubit using nine qubits in the following way: 

|0) enc = -L= (|000) + |111)) (|000) + |111)) (|000) + |111)) 



|l) enc = JL (|000) - |111)) (|000) - |111)) (|000) - |111» (5) 

Note that with this encoding, each of the blocks of three qubits is still encoded with a repetition 
code, so we can still correct bit flip errors in a fashion very similar to above. But what about phase 



4 Note, that if we trace out the environment (see App. IB . 2ft , we obtain a process where with probability 1 — e 
nothing happens, and with probability e the bit is flipped, e defines the rate of error. 
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errors? A phase flip error, say on one of the first three qubits, acts as 

phase flip 1 



'23 

phase flip 1 



(|000) -|111)) (|000) + |111)) (|000) + |111)) 
(|000) + |111))(|000)-|111»(|000)-|111)) 



|0) e 



We need to detect this phase flip without measuring the information in the state. To achieve this 
we will follow the ideas developed for the bit flip and measure the parity of the phases on each pair 
of two of the three blocks. There is an interesting and useful duality between bit flip and phase 
flip errors. Let us look at a different basis for qubits, given by the states 



|1» 



1 



|-) = _(|0>-|1» 



The change from the standard basis to the |zb)-basis we apply the Hadamard transform H. Now 
note that a phase flip error acts as 



phase flip 



phase flip 



l+>- 



(6) 



In other words a phase flip in the standard basis becomes a bit flip in the |±)-basis. If we apply a 
Hadamard transform to each of the three qubits of a block of the Shor code, we obtain 



7^ 3 -L(|000) 

ff®3_l_ ( | 000) 



(|000) + |110) + 1 101) + |011>) 
(I 111) + |001) + |010) + |100» 



Note that the parity of each of the bitstrings for positive phase is even and for negative phase it is 
odd. We can see that if two blocks have different phase, then the parity of its constituent 6 qubits 
is odd, otherwise it is even. Hence, in order to detect a phase error, we just need to measure the 
parity of all qubits in the three possible pairs of blocks in the |±) basis. The circuit in Fig. [5] does 
exactly that. 



code 
qubits 



block 1 



block 2 



block 3 
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Figure 5: Circuit to measure the parity of the phase of the first and the second block of three qubits. In the 
|±)-basis a CNOT acts on target (t) and control (c) bit as |+)t|±) c —* |+)t|±) c and |— )t|±) c — * |— )t|+)c, i-e. it 
flips the control bit in the |±) basis if the target bit is |— ) c . This way the ancilla bit is flipped an even number of 
times from |+) to |— ) if blocks 1 and 2 have the same phase, and an odd number of times if they have different 
phase. 



The nine-bit Shor code above protects against bit and phase flip, and also against a com- 
bination of both (when both bit and phase flip are detected, the error is XZ). Note again, that 
we assume that each of the qubits undergoes some error at rate e. Hence, by the discretization 
resulting from the error-recovery measurement, the state will be projected onto either a state where 
no error has occured (with probability > 1 — 9e) or a state with a large error (single qubit, two 
qubit etc.). This code protects against all single qubit errors. Only when two or more errors occur 
(which happens with probability < 36s 2 ) the error is irrecoverable. Comparing this with the error 
rate of an unencoded qubit, e, we see that this code is advantageous whenever e < 1/36. 
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6 Quantum Error Correcting Codes 

"If people do not believe that mathematics is simple, it is only because they do not realize how 

complicated life is. " 
John von Neumann 

Let us internalize the crucial properties of Shor's code: A small part of the Hilbert space of 
the system is designated as the code subspace C. In the Shor code C is spanned by the two states in 
Eq. |[5j|. We have a discrete set of correctable errors {E Q }. Each of the correctable errors E a maps 
the code space C to a mutually orthogonal error space. We can make a measurement that tells us 
in which of the mutually orthogonal spaces the system resides, and hence exactly infer the error. 
The error can be repaired by applying an appropriate unitary transformation (E^). 

These ideas have been formalized to define quantum error correcting codes (QECCs). An 
(N, K) quantum error correcting code C is a K dimensional subspace of an N dimensional Hilbert 
space (coding space H) together with a recovery (super)operator 1Z. The recovery operator usually 
consists of some sort of measurement (to detect the error) followed by a conditional unitary to 
correct it, but we do not necessarily have to think about it in this way. The code C is £ -correcting 
if on the code-space an error followed by recovery restores the codeword, i.e. 

K o £ = X on C 

It has been shown BDSW96, KL97J that QECCs exist for the set of errors if the following condi- 
tions (QECC- conditions) are satisfied: 

QECC-conditions: Let E be a discrete linear base set for £ and let the code C be spanned by the 
basis : i = l...K}. Then C is an ^-correcting QECC if and only if V|*;), S C 

VE a ,E^E. (7) 

What this means is the following: Errors E Q , E^g £ E acting on different orthogonal codewords \ *f?i) 
take these codewords to orthogonal states (($t|EtE a | 1 Jj J -) = 0). Otherwise errors would destroy the 
perfect distinguishability of orthogonal codewords and no recovery would be possible. On the other 
hand for different errors acting on the same codeword we only require that (<I' i |Ej 3 E Q | , I , i ) does 
not depend on i. Otherwise we would - in identifying the error - acquire some information about 
the encoded state |^) and thus inevitably disturb it. 

We usually think of the errors E Q to be a subset of the Pauli group with up to t non-identity 
Pauli matrices (for a terror correcting QECC). 

It is now possible to make the connection to the theory of classical error correcting codes. It 
turns out that there are families of classical codes with certain properties (concerning their dual) 
which make good quantum error correcting codes Ste96b. CS96 . The codes have become known as 
Calderbank-Shor-Steane codes (CSS codes). It has been shown that for any number t of correctable 
errors, there is a QECC which can correct up to t errors (bit flip, phase flip and combination). 
As a result this code reduces the error for an unencoded qubit, e, to ce t+1 , where c is a constant 
depending on the code. 

To illustrate this connection to classical codes we will briefly describe the smallest code in 
that family, which was first given by Steane Stc96b . This is the so called 7 qubit Steane code, 
based on the classical 7-bit Hamming code. The classical Hamming code encodes one bit into 7 
bits. The codewords can be characterized by the parity check matrix 

/ 1 1 1 1 \ 
#= 1100 11. (8) 
\ 1 1 1 1 / 

The code is the kernel of H , i.e. each code word is a 7-bit vector v co d e such that H ■ v co d e = (0,0, 0) T 
in GF(2) arithmetic. H has three linearly independent rows (over GF(2)), so the kernel is spanned 
by four linearly independent code words, and hence there are 16 different code words. If an error 
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Figure 6: Computation of the bit-flip syndrome for Steane's 7-qubit code. The three ancilla qubits 
carry the error syndrome. 



affects the ith bit of the codeword, this codeword is changed to v co( i e + The parity check matrix 
of the resulting word is H(v co d e + ei) = Hei =/= 0, which is just the ith column of H. Since all 
columns of H are distinct, each ei has a different error syndrome and we can infer ei from it. 
Steane's code, derived from the Hamming code, is the following 

|0) code = (E e ~ ng l«>) = 7f (looooooo) + 10001111) + 10110011) + 10111100) 

+ |1010101) + 11011010) + |1100110) + 11101001)) , 

\l)code = j§ (E £ odd^ |u>) = ^= (jlllllll) + 11110000) + 11001100) + |1000011) 

+ |0101010) + |0100101) + 10011001) + 10010110)), 

(9) 

i.e. |0) code is the superposition of all even and |l) co de the superposition of all odd codewords. Note 
that all states appearing in the code words are Hamming code words, and hence a single bit flip 
can be detected by a simple parity measurement, as in Fig. [6l 

To deal with phase flip errors we use the observation of Eq. © , that phase flip errors corre- 
spond to bit flip errors in the |±) basis. But if we change to this basis by applying the Hadamard 
transform to each bit, we obtain 



H® 7 \0) codc = \ (E H ^ Jng l«>) = 7f (|0)codc + |l)codc) , 

# 07 |l)codc = \ (E Ha - inB (-l)" t(t,) b>) = 71 (I0)code - |l)codc) , (10) 

(where wt(v) denotes the weight of v). The key point is that in the |±) basis, like in the |0), |1) 
basis, |0) code and |l) cot z e , are superpositions of Hamming codewords. Hence, in the rotated basis, 
as in the original basis, we can perform the Hamming parity check to diagnose bit flips, which are 
phase flips in the original basis. Assuming that only one qubit is in error, performing the parity 
check in both bases completely diagnoses the error, and enables us to correct it. 

The core observation that allows to generalise Steane's construction to codes that encode more 
bits and can correct more errors is the following: If a quantum code word is a linear superposition 
over classical code words that form a code C, then in the |±) basis this code word is a linear 
superposition over the code words of the dual code C~*~ , where C = {u : u ■ v = Vi> € C}. This 
can derived when looking at the action of the Hadamard transform on rx-bit strings |.r): 

H^\x) = ^= (-!)*■%> 
VZ ye{o,i}» 

As it is easy to see from Eq. ©, the Hamming code is its own dual, and hence we can use its 
properties to correct phase errors. In general, the CSS constructions find a code C\ (for the bit flip 
errors) such that its dual, , contains a sufficiently good code Ci (for the phase flip errors). 
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Having seen the nine qubit Shor code and the seven qubit Steane code, one can ask what the 
minimal overhead for a quantum code that corrects a single error is. It turns out that the smallest 
quantum code that achieves this has five qubits, and that this is optimal [LMPZ96J. 

Gottesman developed a very powerful formalism, so called stabilizer codes, that generalises 
both the Shor code and CSS codes and gave fault tolerant constructions for them (for more details 
see App.[D|. 

7 Fault-tolerant computation 

"When you have faults, do not fear to abandon them. " 
Confucius 

We have seen that good quantum error correction codes exist. But so far we have worked 
under the assumption, that the error recovery procedure is perfect. Of course, error recovery will 
never be flawless. Recovery is itself a quantum computation that will be prone to decohcrcncc. 
We must ensure that errors do not propagate during recovery. For instance, if an error occurs in 
the ancilla bit in the parity measurement of Fig. [5l all six qubits interacting with it might be 
corrupted; the error propagates catastrophically. In fault-tolerant computing design, care is taken 
to avoid this type of error spreading, and other possible introduction and propagation of error. 
But even if we manage to avoid error spreading during recovery, that is not enough. A quantum 
computer does more than just store information, it also processes it. Of course we could decode, 
perform a gate and encode, but this procedure would temporarily expose quantum information to 
decoherence. Instead, we must apply our quantum gates directly to the encoded data. 

7.1 Guidelines of fault-tolerance 

The quantum circuit model gives us a good intuition about the points in a computation that 
potentially can introduce errors and corrupt the computation. We need to be able to faultlessly 
prepare the initial state, compute with a sequence of quantum gates and measure the output. 
Using a code to protect our computation against noise, we also need to assure faultless encoding, 
decoding and correction. Each qubit will be encoded into a separate block and quantum logic has to 
be applied directly on the encoded states so that the information is never exposed to noise without 
protection. This gives us the following guidelines of fault-tolerance: 

Encoding/Decoding/State Preparation The procedure to encode/decode the information into a 
code should not introduce more errors than the code can correct. In the case of a 1-error correcting 
QECC encoding should not introduce more than one error per encoded block. Often the only states 
that need to be encoded are some |00 . . . 0) states at the beginning of the computation, it is then 
sufficient to ensure fault-tolerant state-preparation. 

Error-detection and Recovery These procedures (for a QECC), usually realized by a set of quan- 
tum gates together with auxiliary qubits, should again not introduce more than one error per 
block. 

Quantum gates should not introduce more than one error per encoded block. Furthermore they 
should not propagate already existing errors from one qubit to several others in the same block. 

Measurement should not introduce more than one error per block. Furthermore the measurement 
result must have probability of error of order e 2 , where e is the probability of failure of any of the 
components in the measurement procedure. This is because the measurement result may be used 
to control other operations in a quantum computer. 
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Figure 7: Construction and verification of the \ancilla) state. If the measurement outcome is 1, 
then the state is discarded and a new \ancilla) state is prepared. 



7.2 Fault-tolerant error correction 

With these guidelines in place, we will now illustrate how fault-tolerant recovery can be achieved, 
using the Steane code in Eq.© as our example. The error- measurement circuit in Fig. [6] is not 
fault-tolerant, as each of the CNOT gates can propagate a single phase error on the ancilla qubit 
to all four of the code qubits. To prevent this propagation, we need to expand the ancilla into four 
qubits, each one the target of only one CNOT gate. But now we are again faced with the problem 
that our measurement should only reveal information about the error (the parity) but not about 
the encoded state. We circumvent this problem by preparing the ancilla in the following state 

\ancilla) = — (|0000) + |1100) + |1010) + |1001) + |0110) + |0101) + |0011) + |1111>) , 
v8 

i.e. in a superposition of all even bit strings. The crucial observation is that on this state one bit 
flip or three bit flips on any qubits all have the same effect, they transform it to the superposition 
of odd bit strings. Similarly, this state is invariant under any even number of bit flips. This means 
that we can infer the syndrome bit from the parity of the ancilla bits, it suffices to measure the 
ancilla in the end. Hence our syndrome measurement obeys the guidelines of fault-tolerance. To 
prepare the ancilla, we can use the circuit in Fig. [3 which at the same time allows verification of 
correct ancilla preparation. 

The ancilla state must be verified before it is used, because a single error in the preparation 
of the ancilla state can propagate and cause two phase errors in the \ancilla) state. Hence the 
circuit in Fig. [7] also verifies that multiple phase errors do not occur. If it fails the test it should 
be discarded, and the preparation procedure repeated. 

Moreover, a single syndrome measurement might be faulty. Thus, the syndrome measurement 
should be repeated for accuracy; only if the same result is measured twice in a row should it be 
accepted. 

With all the precautions above, recovery will only fail if two independent errors occur in this 
entire procedure. The probability that this happens is still c£ 2 for some constant c, but because 
there are now many more gates and steps involved the constant c can be quite large. 

In a conceptually similar fashion it is possible to encode a qubit and to measure it in a basis 
spanned by \0) co de and \l) co de while following the guideline of fault-tolerance. For details the reader 
should consult e.g. [Sho961 ISTe97l IPre98bl IPre991 IPre98aj or the work of Gottesman (e.g. |Got97cj ) 
for fault-tolerant construction for CSS and other codes in the stabilizer formalism (see App. [Djl. 

7.3 Fault-tolerant computation 

We have seen how to recover stored quantum information, even when recovery is faulty. But we 
also want to compute, and the gates we use will be faulty as well. This means that we must be 
able to apply the gates directly to the encoded data, without introducing errors uncontrollably; 
following the guidelines of fault-tolerance. 
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In fact, staying with the 7-qubit Steane code, it is easy to implement some single qubit gates 
directly on the encoded data. We have seen that the bitwise Hadamard transform implements an 
encoded Hadamard transform on the codewords (see Eq. (jlpp b This means we can apply it without 
propagating errors and such that each gate introduces at most one new error. Similarly, it is easy 
to see that the bitwise X gate induces an encoded X enc because even code words get mapped 
to odd ones and vice versa. Moreover the bitwise Z gate (which is just HXH) implements the 
encoded Z. In the same way the ? gate (a diagonal single qubit unitary with diagonal (l,i)) can 
be implemented by applying it bitwise to the encoded data. 

Also, it is not hard to see that the bitwise CNOT between two quantum code words, i.e. 
a CNOT from the first qubit of the first code word to the first qubit of the second code word, 
a CNOT from the second qubit of the first code word, to the second qubit of the second and 
so on, implements a global CNOT between two code words. We call such an implementation of 
an encoded two qubit gate transversal. This is very promising, but the set of operation we can 
implement fault-tolerantly is not yet universal. We also need to implement the 7r/8 gate for a 
universal set of gates. Unfortunately it seems to be impossible to implement the 7r/8 gate in a 
fault-tolerant way. There are several ways to circumvent this problem. Shor, for instance, gave a 
way to complete the universal set by giving a transversal implementation of a three qubit gate, the 
Toffoli gate [Sho96 . However, we will follow a slightly different route here. It turns out that the 
gates {X, | , CNOT} are universal, provided we can measure a code word in the \Q) co de, |l)corfe 
basis and we have access to the state 

7T 

|7r/8+) C ode = |0) code + exp(i-)|l) CO(Je . 

It has been shown that there is a fault-tolerant preparation and verification procedure for the state 
\Tr/8 + ) co de, which is similar in spirit to the one in Fig. [7j 

Several variants of fault-tolerant universal quantum computation have been developed for 
this and other codes, like CSS codes and stabilizer codes. They differ in the details of ancilla 
preparation and number of interactions with the code word. As a result it is possible to implement 
computation and error correction following the guidelines of fault-tolerance. 

8 Concatenated coding and the threshold 

"Much of modern art is devoted to lowering the threshold of what is terrible. " 

Susan Sontag 

We have seen how to encode quantum data, how to perform fault-tolerant recovery and how 
to compute fault tolerantly on encoded states. However, this is still not sufficient to implement 
quantum algorithms. Quantum codes exist that can correct up to t errors, where t can be as large 
as we wish, and on which we can compute fault-tolerantly. This means that if our error rate and 
gate and measurement failure rate is e, then computation will only fail with probability of order 
£ t+i £ Qr a ^ Q f our choice. So what is the problem? 

The crux is the complexity of the recovery procedure. With large t we reach a point where 
the recovery procedure takes so much time that it becomes likely that t + 1 errors occur in a 
block. The number of steps required for recovery scales as a power of t, t a with exponent a > 1. 
That means that the probability to have t + 1 errors before a recovery step is completed, scales 
as (t a e) t+1 . This expression is minimized when t = ce~~ for some constant c and its value is at 
least pfaii = exp(— cae~~). This means that per error correction cycle our probability to fail is at 
least pfaii- If we have N such cycles, our failure probability is Npf a u = exp(~ca\ogNe~i). If we 
want to keep this (much) smaller than 1, our error rate e has to scale as n^vl 5 1 ^' e ' ^ e l° n S er 
the computation, the more accuracy we need; an unrealistic assumption. 

To overcome this problem, a special kind of hierarchical approach is used [KXZ98] (see also 
|Kit97[ IAB97] 1. Ideas related to this approach go back to pioneering works of John von Neumann, 
who established a theory of fault-tolerant computation for noisy classical computers }Neu56j . 

Suppose that we encode our information into a code, like Steane's code. Then, in turn, we 
encode each qubit of this encoded qubit using again Steane's code, and so on. We obtain several 
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layers of encoded qubits, say k layers, and the total number of qubits is 7 k . This type of code is 
called concatenated code. 

The exact calculations behind the threshold theorem are rather intricate. Let us only give 
a rough intuition. The idea is to perform error recovery most often at the lowest level, and less 
and less often at higher levels of the hierarchy which have more qubits. We recursively apply the 
idea of simulating a circuit using an encoded circuit, constructing a hierarchy of quantum circuits. 
Suppose in the first stage the original qubit is encoded in a quantum code whose encoded qubits 
are again encoded in a quantum code and so on. Each level has some error recovery cycles. If the 
failure probability at the lowest level of this code is e then the failure probability at the next level of 
encoding is ce 2 (remember that the Steane code reduces the error rate from first to second order), 
where c counts all possibilities that two errors can occur, given the number of gates in the recovery 
procedure and the fault-tolerant application of gates. Continuing with this reasoning, the effective 
error rate at the next level is ce 2 , and error recovery reduces the error to c(ce 2 ) 2 . Proceeding level 
by level, we see that at the kth level of the hierarchy an error on one of the sub-blocks only has 
probability (ce) 2 jc. We see that if our noise rate is below a certain threshold, e < e t h = 1/c, then 
the error is reduced in each level of concatenation. This gives the error threshold for fault-tolerant 
quantum computation. 

How does the total size of the circuit grow? Let's assume that one level of encoding requires 
an overhead of G gates to fault-tolerantly perform a gate and error-correct. Then the size of the 
simulating circuit grows as G k . Let us see when this concatenation procedure gives a small enough 
failure probability: 

Assume the initial quantum circuit we want to emulate has N gates and we wish to achieve 
final accuracy 1 — p. In such a circuit each gate has to have a failure probability less than p/N 
(gate errors add linearly). To achieve this we concatenate k times so that 



2 k < log(Ne th /p) 
logOWe) 

If e is smaller than the threshold value, such a k can be found. For error rates below the threshold 
we can achieve arbitrary accuracy by concatenation. Per initial gate the final circuit will have 



gates and so its final size will be Npoly (log N) which is only polylogarithmically larger than the 
original N. 

Note that we have crudely simplified our calculations. Estimating the threshold is an extremely 
intricate task. Its value depends on the details of the code and fault-tolerance constructions used. 
It also depends on whether we assume the classical syndrome processing to be perfect or not. In 
all cases it seems that we need high parallelization and a supply of fresh ancilla qubits during the 
computation. For a long time the actual value of the threshold has been estimated by optimists 
and pessimists to lie somewhere between 10 -4 and 10 -7 . Recent work seems to indicate that it 
can be even as high as 3% |Kni05j (see also [AGP05, Rei05]) and optimized numerical simulations 
of fault-tolerant protocols suggest a threshold as high as 5% (however, to tolerate this much error 
existing protocols require enormous overhead). 

9 Error avoidance and Decoherence Free Subsystems 

"It is well known that "problem avoidance" is an important part of problem solving." 

Edward de Bono 

In all our previous analysis we have assumed that the errors behave independently and affect 
few qubits at a time. What, if this is not the case? There are situations, where groups of qubits 



(ce) 




c 



or 




Vol. 2, 2005 Approaches to Quantum Error Correction 



15 



interact with the environment in a collective fashion, possibly undergoing a correlated error. For 
these cases the theory of decoherence-free subspaces and subsystems has been developed, sometimes 
also called error- avoiding codes. These codes come into play when the decoherence process is in 
some sense not local, but collective, involving groups of qubits. 

Let us give a classical example. Assume we have an error process that with some probability 
flips all bits in a group, and otherwise does nothing. In this case we can encode a classical bit as 

— >00 1 — ►01. 

The error process will change the encoded states to 

00 — ► 11 01 — ► 10. 

But no matter if the error has acted or not, the parity of the bit string is unchanged. So when we 
decode, we will associate 00 and 11 with the encoded bit and 01 and 10 with the encoded 1. Note 
that we will be able to decode correctly no matter how hight the rate of error is! The error does 
not touch the invariant, parity, into which we encode. That means that our encoded information 
has managed to completely avoid the error, we have given the simplest error-avoiding code. 

A lot of research has been done to generalize this to the quantum case (see e.g. [KemOll 
BacOl, LW03] for surveys). The noise model is in general derived from the Hamiltonian picture 
(see App. IB.ip or from the Markovian picture (see App. IB.3|) . a brief derivation is given in App. |EJ 
In general the underlying assumption is that several qubits couple collectively to the environment 
and are affected by a symmetric decoherence process. In systems where this form of decoherence 
is dominant at the qubit level, error-avoiding codes as part of the error-correction scheme are 
advantageous. 

We will content ourselves with briefly describing one example. For one of the most common 
collective decoherence processes the noise operators on n qubits (see App. [E]) in the Hamiltonian 
picture (App. IB.1[) are given by S a = Yli=i a ai wnere a a i s a Pauli matrix (a = {x, y, z}) on the 
ith qubit. Intuitively this means that the possible unitary errors are exp(itS a ). The condition for 
decoherence-free subspaces is that 

S a | codeword) = c a \codeword) , 

or in other words that the code space is a simultaneous eigenspace of each S a with eigenvalue c a . 
If this is the case, each unitary noise operator only introduces an unobservable phase exp(itc a ) on 
the code space. 

Let us look at an encoding of 4 qubits: 

|0) code = \s) ® \s) 

Wcode = ^= (|*+) ® |*-) - \t ) ® |*0> + \t-) ® |f+» , 

where |s) = m) ^ 10) and |t_, 0l+ ) = {[00), |01> Jj 10> , 111)}. It is easy to see that S a \0) code = 
S a \l)code = for a — {x,y,z} (i.e. that the coefficients c a = 0). This means that both code 
states are invariant under collective noise. If we encode our information into the subspace spanned 
by |0) co de and \l} co de, it will completely avoid the errors; it resides in a "quiet" part of the space, 
a decoherence-free subspace. 

This idea has been generalized to a wide variety of encodings (in particular to decoherence- 
free subsystems, see App. [E] for a little more detail) and against several kinds of collective noise. 
It has been shown how to compute on these codes (e.g. KBLW01 ) and how to use them in a 
fault-tolerant framework. 

Of course the noise in a real implementation of a quantum computer will be a mixture of 
independent statistical noise, and coupled collective noise, depending on the specific quantum 
hardware used. The idea is to use a hierarchical construction of concatenated quantum codes, as 
in the threshold construction of Sec. [H where the lower levels of the hierarchy use error correction 
(or avoidance) schemes that are highly specialized to the anticipated noise process, whereas higher 
levels are similar to the known fault-tolerant constructions for QECCs (see e.g. |LBW99j for a 
DFS-QECC concatenation scheme). 
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10 Conclusion and Epilogue 

"The best thing about the future is that it only comes one day at a time. " 

Abraham Lincoln 

Without doubt work on quantum fault-tolerance is of prime importance if we want to build 
quantum machines. In the late 1990's pioneering work has established that fault-tolerant quantum 
computation is possible, and we have estimates for the error threshold, the maximum error a 
component can undergo such that the computation still proceeds without catastrophic error. On 
the way we have gained new insights into the nature of decoherence and about the methods and 
tools used to model and describe it. 

At this point we need to optimize the details of fault-tolerant schemes and to generate new 
ideas to improve the threshold. Current experimental results show that the accuracy in implemen- 
tations of the quantum circuit model is on the order of several percent in the best case, whereas 
most estimates of the threshold give numbers of the order of 10 -4 or less. 

The task for current research is to analyse the threshold for particular codes and to develop 
new elements of fault-tolerance that improve the threshold. For instance only recently the existance 
of a threshold for the Steane code has been shown [AGP051 IRei05j . New elements have been 
developed to improve the threshold, like for instance schemes based on postselection |Kni04j . Using 
new ingredients, the threshold has now been estimated to be on the order of 3%, albeit with an 
enormous overhead in the circuit architecture [KniOSj. 

Another avenue of research is to explore other models of quantum computing, different from 
the quantum circuit model, which can be inherently more robust against noise. One idea, initiated 
by Kitaev (Kit 03 , is a scheme for intrinsically fault-tolerant quantum hardware, designed to be 
robust against localized inaccuracies. In this scheme (quantum computing by anyons) gates exploit 
non-Abelian Aharonov-Bohm interactions among separated quasiparticles on a 2D lattice (see also 
e.g. [SBFHOBp . 

Another potentially more robust model is the model of adiabatic quantum computation, where 
computation is achieved by adiabatically tuning a set of Hamiltonians, and where the system is 
always in the instantaneous groundstate. In this system there is a gap between the groundstate 
and the first exited state at all times, which might make the state more robust to noise (see 
[FGG+Qll lAvDK+041 ICFP02] ). Yet another model is the measurement based one-way quantum 
computer [BROlj . Here quantum computation is achieved by measuring single qubits of a suitably 
prepared initial state. The fault-tolerance properties of this system have recently been explored in 
[NDORj . 

All these developments allow us to be optimistic about the future of a quantum computing 
machine. One day we might be able to combat decoherence and have large scale entangled states 
operate for us. The consequences not only for computation, but also for our understanding of the 
fundamental processes behind decoherence will be formidable. 

A Further Reading 

An ever growing community of researchers has been and is working an error correction and fault- 
tolerance in the quantum setting, and it is impossible to mention all of them in this framework. 
What follows is a selection of some of the milestones and recent developments, where the interested 
reader can find more information. 

That quantum error correcting codes exist was first pointed out by Shor [Sho95 and Steane 
Stc96b] in the end of 1995. By early 1996 it was shown by Steane |Ste96a] and Calderbank and 
Shor [CS96] that good codes exist, i.e. codes that are capable to correct many errors. The quantum 
error correction conditions where formalized by Knill and Lafiamme [KL97] and Bennett et al. 
|BDSW96pl . 

The first fully fault-tolerant recovery scheme, which takes into account that encoding, error- 
correction and decoding are themselves noisy operations, was developed by Shor in 1996 |Sho96j . 



5 These authors also analyzed schemes based on random codes. 
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Methods for fault-tolerant recovery where independently developed by Kitaev. 

The first to show that there is an accuracy threshold for storage of quantum information where 
Knill and Laflammc [KL96J and for quantum computation Knill, Laflamme and Zurek [KLZ96] in 
1996 (see also [KLZ98 ). Similar results were reported by Kitaev |Kit97j and Aharonov and Ben-Or 
[AB97] . 

The theory of stabilizer codes and of fault-tolerance in the powerful stabilizer formalism was 
developed by Gottesman (see e.g. |Got97cj j^l. 

Since then several researchers have sharpened the threshold and developed new techniques 
to analyse and improve it. See for instance the recent work of Steane |Ste99[ ISte03] , Knill |Kni04[ 
IKni05j . Aliferis, Gottesman and Preskill |AGP05j and Reichardt |Rei05j and |FKSS04j for a dy- 
namical systems approach. 

In the literature the terms "sub-" and " superradiance" are often encountered in connection 
with collective decoherence processes. Decoherence-free subspaces have been studied by several 
researchers (see for example DG98, ZR97, Zan97, Zan98 in the context of storage, and [LCW98, 
IBLW99| IBKLWOOl IKBLWOlj IDBK+OO] in the context of fault-tolerant computation and [LBW99] 
in combination with QECCs). Decoherence-free subsystems have been introduced by |VKL99|, 
KLVOO], also in the connection with dynamic decoupling techniques. Since then there has been a 
lot of active effort to adapt codes to various collective noise processes. 

The threshold has also been inspected in the light of various (local) error models. For instance 
TB05 discuss the fault-tolerant threshold for local non-Markovian noise (see also |ALZ05| and 
references therein for a recent controversy about the nature of errors and an analysis of error 
models that seem to not allow fault-tolerant computation in [Kal05]). 

Apart from the quantum circuit model alternative proposals for quantum architectures have 
been developed, which could be potentially more robust than the quantum circuit model. One 
example, developed by Kitaev, is the model of computation via anyons (see |Kit03] for an analysis 
of its fault-tolerance properties, or e.g. Freedman et al. [FKLW01 ). Another recent example is 
the measurement based quantum cluster model [BR0l[ introduced by Briegel and Raussendorf. 
Recently, fault-tolerance has been analyzed in this model by Nielsen and Dawson |ND05j . The 
adiabatic model of quantum computation has been introduced by Farhi et al. [FGG + 01 and shown 



to be equivalent to the quantum circuit model in AvDK + Q4 . Childs et al. have discussed its 
robustness in [CFP02] . 



B How to model decoherence 

No quantum system can be perfectly isolated from its surroundings and be viewed as perfectly 
closed. In the physical world, degrees of freedom are usually interacting with many other degrees 
of freedom. In fact, the understanding of this point is crucial for the explanation of why classical 
mechanics in the macroscopic world emerges out of the microscopic operation of quantum mechan- 
ics. Even if we find quantum computer elements that interact only weakly with the rest of the world 
(achievable most likely if they are themselves of atomic or near-atomic dimensions), for short times 
the evolution will be unitary, but eventually even weak interactions will cause significant departure 
from unitarity. Physical systems have a characteristic time for loss of unitarity, which is known in 
the field of mesoscopic physics as the "dephasing time" . It is often extremely short (for a table of 
dcphasing times for various systems see |DiV95j ). for example for the state of an electron traversing 
a gold wire at temperature less than IK it is of order 10 -13 seconds. 

We refer to the effects of noise due to unwanted coupling with the environment as decoher- 
encfl An early treatise on quantum noise from a rather mathematical point of view is due to 

6 See also work by Calderbank, Rains, Shor and Sloane, which develop stabilizer codes as codes over GF(4) 
ICRSS98| 

7 An unfortunate confusion in terms has arisen with the word "decoherence". Historically it has been used to 
refer just to a phase damping process - a specific type of noise - cf. e.g. Zurek IZur91l . Zurek and others realized 
the unique role played by phase damping in the transition from a quantum to a classical world. However, in the 
quantum computing community by and large the term "decoherence" is now used to refer to any noise process in 
quantum processing. 
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Davies |Dav76j . Caldeira and Leggett [CL83 in 1983 undertook one of the first and most complete 
studies of an important model, the spin-boson model. 

Within the context of quantum computers these studies were taken up by Unruh [Unr95] in 
1995 and developed by many others (e.g. Palma et al. |PSE96| . Zanardi [Zan97( IZan98j ). Over the 
past few years work on quantum computation has generated profound insights into the nature of 
decoherence. 



B.l Hamiltonian Picture 

To model the dynamics of a register of qubits (quantum computer) with its surroundings we imagine 
the system immersed into its environment (often called bath) and the whole (quantum register plus 
environment) as a closed system described in a general way by the following Hamiltonian: 

H = H s <g> I B + I s <g> H B + Hj, (11) 

where H5 (Hb) [the system (bath) Hamiltonian] acts on the system (bath) Hubert space Tts 
(He), Is (Is) is the identity operator on the system (bath) Hilbert space, and Hj, which acts 
on both the system and bath Hilbert spaces 7is ®Hb, is the interaction Hamiltonian containing 
all the nontrivial couplings between system and bath. In general Hj can be written as a sum of 
operators which act separately on the system (S Q 's) and on the bath (B a 's): 

H/ = ^S a ®B a . (12) 

a 

(Note that this decomposition is not necessarily unique.) 

In the absence of an interaction Hamiltonian (Hj = 0), the evolution of the system and 
the bath are separately unitary: U(t) = exp[— iHt] = exp[— iHst] <£> exp[— iHst] (we set H = 1 
throughout). Information that has been encoded (mapped) into states of the system Hilbert space 
remains encoded in the system Hilbert space if H/ = 0. However in the case when the interaction 
Hamiltonian contains nontrivial couplings between the system and the bath, information that 
has been encoded over the system Hilbert space does not remain encoded over solely the system 
Hilbert space but spreads out instead into the combined system and bath Hilbert space as the time 
evolution proceeds. 

Very often to describe decoherence in more specific contexts [Unr95, PSE96 it is convenient 
to model the environment (the bath) as a mass-less scalar field, usually assumed to be in a thermal 
state (described by a density matrix in Fock-space, the state space used to model fields. Its (infinite 
dimensional) Hilbert space is spanned by 

0|»% ie {0,1,2,...} 

k 

where k labels the modes. On each mode (factor in the tensor product) we have two operators, 
the lowering operator bk given by bk|i)k = — l)k and the raising operator b k given by 
^kl*) k = V* + l\i + l)k- Note that b t bk|i)k = i.e. |i)k is an eigenstate of the number 

operator b t bk. 

The quantum register is described by an arrangement of n two-level systems (spins). This 
results in the spin-boson model, where the bath Hamiltonian can be written as 



and, e.g., for the spin-boson Hamiltonian, = h\.hk [LC D + 87 . and bj,, b^ are respectively 



creation and annihilation operators of bath mode k. The interaction Hamiltonian is given by 

n 

H ' = E E E^^^ + k, (13) 



2—1 OL — + ,— ,2 k 
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where gf k is a coupling coefficient and h.c. denotes the hermitian conjugate. In the spin-boson model 
one would have B^ = bfc, = h\ and B^ = bj. + bfc. Thus a± g) B* expresses a dissipative 
coupling (in which energy is exchanged between system and environment), and o~ l z ® B fc corresponds 
to a phase damping process (in which the environment randomizes the system phases, e.g., through 
elastic collisions). 

B.2 Operator Sum Picture 

The evolution of a quantum state in the entire space is unitary in a closed system of which we can 
observe and control all parts. Very often, however, this is not the case: imagine for example that we 
perform a certain measurement and then "forget" or lose the measurement outcome. As a result 
we know that the state has collapsed into some eigenstate of of the measurement operator, but 
not into which one, and we will have to assign probabilities to each of them to model the current 
state of the system. Take the example of a qubit \ip) — a\0) + f3\l) and the measurement in the 
computational basis. Performing this measurement and "throwing away" the result will leave the 
system in the state |0) with probability \a\ 2 and in the state |1) with probability \(3\ 2 . To describe 
this mixture of possible states the density matrix formalism proved to be very useful: we write 

p = M 2 |o)(o| + |/3| 2 |i)<i|= ( |a Q |2 |/3 ° |2 \ 

Another way we can think about density matrices is to imagine that we have a (big) quantum 
system and can access only part of it. To describe the quantum state of the accessible part (call 
it ^4), we have to average over the non- accessible degrees of freedom of the system (part B). This 
is done by performing a complete measurement on system B (mentally) and "throwing away" the 
outcomes (because we do not have access to them) . Let us give the example of a state of 2 qubits 
\^)ab = a|00) + /3|11) where we only have access to the first qubit (part A). If we (mentally) 
measure system B in the computational basis, we obtain the density matrix from Eq. (|14p . 

Let us proceed to the more general description of the statics and dynamics of open quantum 
systems, described by mixed states: 

States: States in an iV-dimensional Hilbert space H.n are given by density matrices p such that: 

• p is hermitian: p^ = p 

• p is positive: V|^>) € Ti.N (V'HV') > 0, which is equivalent to A; > 0, where Xi are the 
eigenvalues of p (this can be viewed as a statement about the positivity of probabilities of 
the pure states in the mixture). 

• p has trace 1 (this corresponds to the normalization of probabilities) 

Pure states \ip) of the system are associated with the density matrix p pure = \^){ip\. A general 
mixed state is diagonalizable and can be written in its spectral decomposition as 

P = ^2Pk\*Pk)(if)k\ 

k 

Note that there are in general many other ways to write p in the above form if we allow for non- 
orthogonal states in the decomposition. Each such decomposition {q^, \4>k)} is called an ensemble 
realization of p. The ambiguity in the decomposition of p manifests some loss of information, in 
the sense that the probabilistic mixture p could have arisen in a multitude of ways. 

Dynamics: To describe the evolution of an open system - and thus of decoherence - we will immerse 
it into a closed system. The evolution of a closed system is described by a unitary transformation, 
which translates to an effective dynamics of the open system governed by completely positive (and 
trace-preserving) maps. Loosely speaking, these are maps that in Ha take density matrices to 
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density matrices, with the additional property that if we extend the map to bigger spaces Hab by 
applying the map on A and the identity map on B, then they still take density matrices to density 
matrices. More precisely, an operator map A is completely positive if (I ® A)(p) > whenever 
P> 0. 

The important point here is that according to Kraus ' Representation Theorem [Kra83] every 
completely positive trace preserving map can be written as 

P - m »pK with E M t M » = 1 ( 14 ) 

where the Mn are N-by-N matrices (N being the dimension of the Hilbert space). In particular 
this describes both the Hamiltonian and the Markovian dynamics, though in general it is often 
tedious to derive the form of the from the S a of the Hamiltonian picture (Eq. I[12p). Note that 
contrary to the case of unitary evolution, general open system dynamics is not reversible. 



B.3 Markovian Picture 

Another very powerful formalism to describe decoherence is the approach of master equations. 
Markovian quantum dynamics describes processes resulting from the interaction with a Markovian 
environment in the so called Born-Markov approximation. The main objective is to describe the 
time-evolution of an open system with a differential equation - the Master equation - which properly 
describes non-unitary behavior. 

In fact it is not a priori obvious that there needs to be a differential equation that describes 
decoherence. Such a description will be possible only if the evolution of the quantum system will 
be local in time (Markovian) , i.e. that the density operator p(t + dt) is completely determined by 
p(t) . This is usually not the case because the bath retains a memory of the state of p at previous 
times for a while and can transfer it back to the system. 

To obtain the Master equation in the Born-Markov approximation a common approach is to 
start with the Hamiltonian description Eq. and use time-dependent perturbation theory (i.e. 
an expansion into time-series) with careful truncation (cf. |Car93j ). 

A more axiomatic way, followed by Lindblad |Lin76[ IAL87j , is to establish the most general 
linear equation for density matrices. More precisely, by assuming that (i) the evolution of the system 
density matrix is a one-parameter semigroup, (ii) the system density matrix retains the properties 
of a density matrix including "complete positivity" , and (iii) the system and bath density matrices 
are initially decoupled, Lindblad ,l.hi7(i' has shown that the most general evolution of the system 
density matrix ps(t) (in a Hilbert space of dimension N) is governed by the master equation 



-£=m = -i[B. s ,p} + - ]T a aP [[F a ,pFl] + [F a p,Fl]) 



a, 0=1 
M 



(15) 



Q,/3=l 



Here H5 is the system Hamiltonian generating unitary evolution plus possible additional terms due 
to the interaction with the bath - usually referred to as Lamb-shift -; the operators F Q constitute 
a basis for the M-dimensional space of all bounded operators acting on HsU, and a a p are the 
elements of a positive semi-definite Hermitian matrix. We refer to the matrix a a p as the GKS 
matrix. 

Every such process described by Eq. (fT5]) corresponds to some interaction which, if applied 
for a duration i, induces a quantum operation £ t . The class of quantum operations £t forms a 
Markovian semigroup, such that 

£ s £t = £s+t ■ 



they are often called the Lindblad operators or the quantum jump operators 
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Here £ s £t denotes composition of the operations, i.e., £ s o £ t . Each Markovian semigroup in turn 
describes the dynamics resulting from some interaction with a Markovian environment in the Born 
approximation. 

Note that the Operator Sum Representation also describes Markovian dynamics, though it 
is in practice often difficult to derive the (Eq. (fl4|) ) from the F Q of the Markovian picture 
(Eq. (USD). 

To make our description of Markovian quantum dynamics concrete, we present some impor- 
tant examples of qubit noise processes^]. We choose the basis {F a } to be the normalized Pauli 
operators ^Wx, o~y,o~z}, and we write the density matrix of a qubit as 

( Poo Poi 

V PlO Pll 

The first process, phase damping, acts on a qubit as 

£f D W= C Poo e-y, 

where 7 is a decay constant and t is the duration of the process. The generator has a GKS matrix 
with a^P = Qj- and all other a p ? = 0. The second example is the depolarizing channel, which acts 
on a qubit as 

/ l+e~ 7t (poo-pn) P ~lt n \ 

F DEP (n) - 2 Pm 

* [P) ~ { e-^pio ^-^(p^-poq) ) ■ 

Its GKS matrix has the nonzero elements aY EP = oJ^ p = a^ 3 EP = 7/4. Our final example is 
amplitude damping, which acts on a qubit as 

cAD/ \ ( Poo + (1 - e" r *)pii e- rt ^p i 

t-t (P) - P -n/2, 



e "''pio e rt pii 



The GKS matrix a^g is given by 




(16) 



C The Error-model 



The underlying key assumption for efficient usage of quantum error-correcting codes is the inde- 
pendent error model. Intuitively, if a noise process acts independently on the different qubits in 
the code, then provided the noise is sufficiently weak, error-correction should improve the storage 
fidelity of the encoded over the unencoded state. 

Mathematically, the assumption of independent errors can be retraced in each of the deco- 
herence pictures introduced in Sec. [Bj In the Hamiltonian picture we can rewrite Eq. (fTSJ) as 

K 

i—l a—x,y,z k 

where B? fc = Bj; and B? fc ,B^ are appropriate linear combinations of B^ and B^: 

Bf fe = i(. 9ife B-+ 5 +B+) 
B? fc = \ (.9 A - s£B+) 

9 For a review of these processes and their relevance to quantum information theory, see INC00I ; [Prc98a . 
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i.e. all system components can be expressed in terms of tensor products of the single qubit Pauli 
matrices. If we expand the evolution to first order in time and assume that the error-rates gtk are 
independent we will get an operator sum representation (OSR) (cf. Eq. (|14[) ) where each term is a 
linear combination of the Pauli matrices (see |LBW99j for a recent derivation). In the Markovian 
formulation of noise (cf. Eq. (Tl5|) ) the independent error model assumes that each of the F a affects 
only one of the qubits and that the F Q are not correlated. Higher order correlations are taken 
into account by using a code that is suitably constructed for the particular error-model. Therefore 
the theory of QECCs has focused on searching for codes that make quantum information robust 
against 1, 2,... or more erroneous qubits, as this is the most reasonable model when one assumes 
spatially separated qubits with their own local environments. Detection and correction procedures 
must then be implemented at a rate higher than the intrinsic error rate. 

From the linear decomposition of the error operators in the OSR or the master equation 
it follows that QECC-schemes need to be able to correct only a discrete set of errors, namely 
those generated by the Pauli-grourFl. Intuitively we can imagine that the error process acting on 
one qubit puts the quantum state into a superposition of one of the four possible discrete errors 
(Ji,o~x,y,z) and the error-detection and correction procedure collapses the state into one of these 
errors and then corrects as needed. This intuition can be made formal |NC00[[KL97j : it is possible 
to decompose the the operators M M that appear in Eq. (jT4j) into a basis of tensor products of the 
Pauli matrices. It can then be seen, when deriving the OSR representation from the Hamiltonian 
picture, that to first order in the noise rate the noise process gives terms with a single non-identity 
matrix (single qubit error). The core message is again that quantum codes need to account only 
for a discrete linear basis of all possible errors. 

D Stabilizer Codes 

Stabilizer codes, also known as additive codes, are an important subclass of quantum codes. The 
stabilizer formalism provides an insightful tool to quantum codes and fault-tolerant operations. It 
was developed by Gottesman in 1996 |Got97a( Got97c]. We will not outline the full formalism here 
but rather describe only the key elements. A full treatment can be found in [Got97bj . 

The powerful idea behind the stabilizer formalism is to look at the set of group elements that 
stabilize a certain code and to work with this stabilizer instead of directly with the code. In the 
framework of QECCs, the stabilizer permits on the one hand to identify the errors the code can 
detect and correct. It also links quantum codes to the theory of classical error correcting codes in 
a transparent fashion. On the other hand it also allows one to find a set of universal, fault-tolerant 
gates. 

An operator S is said to stabilize a code C if 

|*)eC iff S|tf) = |#) VSeS. (17) 

The set of operators {S} form a group S, known as the stabilizer of the code Got97cJ. Clearly, 
S is closed under multiplication. In the theory of QECC the underlying group is the Pauli-group, 
the stabilizers are subgroups of the Pauli-group (tensor products of I, X, Y, Z ). Since any two 
elements of the Pauli group either commute or anti-commute, the stabilizer, in this case is always 
Abelian. The code is thus the common eigenspace of the stabilizer elements with eigenvalue 1. 
Additive codes are completely characterized by their stabilizer S. The stabilizer S can be given by 
a set of generators which span the stabilizer group via multiplication. 

We define the centralizer of S to be the set of elements e in the Pauli group that commute 
with every element in S, i.e. eS = Se for all S € S. In case of the Pauli group it coincides with 
the normalizer of S - the set of elements E in the Pauli-group with ESE^ E S for all S 6 S. We 
will denote it by N(S) and call it normalizer throughout. Note that the normalizer contains the 
stabilizer S itself. 

Recall that in the theory of QECCs the error process £ can be expanded in terms of the 
error basis E which is a subgroup of the Pauli group. In particular E Q € E either commutes or 

10 In the context of error-correction the Pauli matrices u x ,y,z are often denoted by X, Y, Z respectively. 
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anti-commutes with elements in the stabilizer. This allows us to recast the QECC-condition Eq. |(7J) 
in the stabilizer formalism as follows 

QEC'C- conditions: A quantum code C with stabilizer S is an £ -correcting QECC if for all~E a ,~Ep € 
E one of the following holds: 

(1) There is an S E S that anti-commutes with EjjE/3 

(2) E* e S. 

This clearly implies the QECC conditions Eq. ([7]), since in the case of (1) . L \E\^E j) = 
(^lE^E^Sl^) = -(tfilSEtE/sl**) = and in the case of (2) (¥ t -|Et E^) = (^|%) = 6 l3 . In 
particular this implies that the matrix element c a p is either in the case of (1) or 1 in the case of 
(2). Conditions (1) and (2) can be reformulated succinctly as: E^E^ ^ N{S) — S. 

The nine bit Shor code in Eq. (J5|) is a stabilizer code. The set of its stabilizers is generated 

by 

Z1Z2 Z2Z3 Z±Z§ Z^Zq ZiZ% Z$Zc) 
XiX2X?,X-{X%Xq X^X^X^X^X^Xg 

Note that these generators correspond to the measurements to detect bit flip (the Z generators) 
and phase flip (the X generators) errors. Indeed, for instance a bit flip error on the first qubit 
anticommutes with Z\Zi- 

The generators for the stabilizer of the Steane code in Eq. ((9]) on the 7 qubits are the following: 

UIZZZZ IIIXXXX 
IZZIIZZ IXXIIXX 
ZIZIZIZ XIXIXIX. 

Note how the positions of the Z and X correspond to the parity check matrix H in Eq. ([5]) . The 
fact that the code is self dual is seen in the symmetry between the Z and the X. Note that the 
change of basis from |0), |1) to the |±) basis, which is implemented by a conjugation with the 
Hadamard transform H on each bit, transforms all Z into X and vice versa (HXH = Z and 
HZH = X). 

The smallest possible quantum code to protect against single qubit errors, the 5-qubit code 
LMPZ96 , has the following (shift invariant) stabilizer 

XZZXI 
IXZZX 
XIXZZ 
ZXIXZ. 

The stabiliser formalism allows to derive fault-tolerant computation in a convenient way. A 
key ingredient are encoded gates that transform encoded states, without decoding them, which 
would expose them to noise without protection. For universal quantum computation it is sufficient 
to show how to implement a universal discrete set of gates fault-tolerantly. 

The key insight to fault-tolerant gates is that these encoded gates should only take encoded 
states to valid encoded states, without leaving the code-space. For an encoded gate G this means 
that after application of 67 to a state stabilized by all elements of S the resulting state must still 
be stabilized by S (see Eq. ([!?])) 

G|tf)eC «-» SG\$) = GS\%) (18) 

or in other words over the code-space 67 commutes with all elements of S. In the case of QECCs 
and the Pauli group this means that 67 is in the normalizer N(S) of S. 

The normalizer allows one to easily identify encoded logical operations on the code. It can 
be shown that for large classes of stabilizer codes a universal gate-set can be implemented cither 
because the encoded gates are transversal, i.e. they affect only one qubit per block, or in connection 
with state-preparation of special states and measurement. 
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To fault-tolerantly measure on encoded states ancilla-state are employed in a procedure like 
the following^ Suppose we wish to measure the encoded qubit in the encoded computational basis. 
The ancilla is prepared in the state |0l). Then we perform an encoded CNOT from the encoded 
qubit to be measured to the ancilla. We then measure the ancilla state in the computational basis, 
which gives us a non-destructive measurement of the encoded qubit in the encoded computational 
basis which is tolerant of possible errors in the encoded qubit. To prevent possible uncontrolled 
error-propagation caused by an incorrectly prepared ancilla, we prepare multiple |Oi)-ancillas and 
apply CNOT's between the DFS state to be measured and each ancilla. Together with majority 
voting this provides a fault-tolerant method for measuring Z |Got97aj . 

The stabilizer formalism also provides an easy framework for fault-tolerant encoded state 
preparation and decoding, as it turns out that only transversal measurements in the Pauli-Z-basis 
are needed for both. For a detailed account of fault-tolerant computation with stabilizer codes see 
Gottesman |Got97bj . 

E Noise model for Decoherence-Free Subsystems 

To derive the model of collective noise that applies to decoherence-free subsystems, we will work 
with the Hamiltonian picture (see App. IB.lj) , following |ZR97j . We use the interaction Hamiltonian 
Eq. (|13|) . Collective decoherence is the case where the coupling constants do not depend on the 
qubit, i.e. gf^ = This allows to rewrite the Hamiltonian in terms of the operators 

n 

S a = J2< (19) 

i=l 

as 

k a=±,z k 

The crucial observation is now that if we start the system in a common eigenstate with the same 
eigenvalue of all the S a with the bath in an eigenstate of Hb then the evolution will be completely 
decoupled. The condition for decoherence-free subspaces (DFS) is 

Sa|*)=c Q |*> V|tf)e£>FS (20) 

Dynamical symmetry allows for unitary evolution of a subspace while the remaining part of the 
Hilbert space gets strongly entangled with the environment. This is true for arbitrary coupling 
strength. The form of noise where all three S a , a € {x, y, z}, come into play is now called strong 
collective decoherence, if there is only coupling to one of the S a the noise is called weak collective 
decoherence. 

It is also possible to study collective noise in the Markovian picture (see App. lB.3"|) . We use Eq. 
(fT5|) . where Lrj gives the non- unitary "coupling ternQ. The decoherence-free condition ~Ld[p\ = 
implies that 

F Q |*)=c Q |*> V\V)eDFS 

As before the decoherence-free states are common eigenstates of the operators F a . In case of 
collective decoherence (symmetry of all the qubits), the F a are exactly the S a of Eq. (fT9|) , and it 
is possible to show that the unitary term of the Master-equation does not affect the DFS to first 
order. 

This line of reasoning can be generalized to decoherence-free subsystems. The S a act on the 
system space. We can study the irreducible representations of this action and identify irreducible 
subspaces. For each irreducible representation there will be one or several irreducible subspaces on 
which the S a act in the same way. The one dimensional subspaces will only get a phase factor, 
they correspond to the decoherence-free subspaces of Eq. (|20|) . But the other subspaces are not 

11 This procedure may differ from case to case, here we only give an example for illustration. 

12 Note that the coupling of a system with an environment might also change the unitary part of the evolution of 
— i[H,p] by introducing an additional term to the system Hamiltonian, called the Lamb-shift. 
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lost for our purposes. Any irreducible subspace can be used to encode information, because the 
action of the noise operators S a will keep the state within the subspace. Even though the state will 
change, its subspace will identify the encoded information. The number of irreducible subspaces 
corresponding to the same irreducible representation gives the number of different code words we 
can use. 

The irreducible representations corresponding to the operators associated with strong collec- 
tive decoherence (Eq. (|19[) ) have been studied widely in physics, as they correspond to the angular 
momentum operators. 

In the case of two qubits there is a single common eigenstate of the S a , a S {x,y, z}, the 
singlet state 

l$) = -L(|o>|i>-|i)|o>). 

For three qubits there is no one-dimensional irreducible representation of the S a , but there 
are two (identical) two-dimensional irreducibles subspaces into which we can encode as 



|^(|010) - |100» / ^ (-2|001) + |010) + |100» 

|^ (|011) - |101)) Wc ° de -\ ^ (21110) - |101) - |011)) 

Increasing the number of qubits the number of identical irreducible subspaces grows favorably, 
so that it is possible to encode at a good rate. For more references on this and the theory of 
fault-tolerant computation on such systems, see Sec. IA1 
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